ILOVEYOU

Forgotten Internet · 2000

ILOVEYOU was an email worm that began spreading globally on 4 May 2000. Its attachment, named LOVE-LETTER-FOR-YOU.TXT.vbs, used a personal-sounding message to persuade recipients to run code that altered files and forwarded itself through Microsoft Outlook.

Why It Mattered

The outbreak demonstrated how social engineering could turn trusted personal contacts into a worldwide delivery system. Its disruption of companies and public agencies made attachment controls, email filtering and user awareness urgent parts of internet security.

The Deceptive Attachment

The ILOVEYOU worm began spreading internationally on 4 May 2000.
It is widely attributed to Onel de Guzman, a student in the Philippines.
It arrived in emails with the subject ILOVEYOU and the attachment LOVE-LETTER-FOR-YOU.TXT.vbs.
The VBScript worm altered files and sent copies through Microsoft Outlook address books.
Its success relied on social engineering and recipients choosing to open the attachment.

Global Disruption

The worm spread rapidly through trusted personal and workplace contacts.
It disrupted businesses, public institutions and government networks worldwide.
At least fourteen United States federal agencies were affected.
Administrators disconnected systems, blocked the attachment and distributed removal guidance.
The outbreak accelerated email filtering, attachment controls and security-awareness training.

Attribution and Legal Gap

Investigators traced the outbreak to the Philippines.
Philippine authorities investigated Onel de Guzman.
Prosecution was hindered by the absence of legislation covering the relevant computer-related conduct.
The case exposed how existing laws had failed to keep pace with internet crime.
Republic Act No. 8792 was enacted in June 2000 and introduced provisions covering electronic transactions and certain computer offences.

Containment and Legacy

Antivirus companies released updated detection signatures and removal tools.
Organisations introduced stronger filtering and restrictions on executable attachments.
Improved detection and public awareness reduced the worm’s ability to spread.
ILOVEYOU remains a defining example of malware driven by social engineering.